pc is restarting

OrestOrest
edited January 2008 in Spyware & Virus Removal
Hey.

Think my pc is infected with some kind of virus. When i turn it on and surf the net, it just restarts. It does not happen every time I turn it on, but happened couple of times.

I have done the steps u recommend and here is my Kaspersky-log and Hijackthis. Had some probs with downloading from the sites u have linked. Maybe because Im using Vista.

Thx for your help and time. Orestus

All objects 258539 0 0 0 0 1208 234 76 15
System memory 2617 0 0 0 0 0 0 0 0
Startup objects 539 0 0 0 0 0 0 0 0
System Backup storage 2 0 0 0 0 0 0 0 0
Mail databases 0 0 0 0 0 0 0 0 0
All hard drives 255381 0 0 0 0 1208 234 76 15
All removable drives 0 0 0 0 0 0 0 0 0

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:01:00, on 19-12-2007
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\TEXTware\HotKey\Twalink.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.dk/0SEDADK/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.dk/0SEDADK/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.dk/0SEDADK/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [CTRegRun] C:\Windows\CTRegRun.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: HotKey.lnk = C:\Program Files\TEXTware\HotKey\Twalink.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe
O13 - Gopher Prefix:
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\r3hook.dll
O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe

--
End of file - 6670 bytes

Comments

  • KatanaKatana
    edited December 2007
    Hello and welcome to the forums

    My name is Katana and I will be helping you to remove any infection(s) that you may have.

    Please observe these rules while we work:
    1. If you don't know, stop and ask! Don't keep going on.
    2. Please reply to this thread. Do not start a new topic.
    3. Please continue to respond until I give you the "All Clear"
    (Just because you can't see a problem doesn't mean it isn't there)

    If you can do those three things, everything should go smoothly :D

    I apologize for the delay in responding, but as you can probably see the forums are quite busy
    and sometimes a post manages to slip by us.
    Unfortunately there are far more people needing help than there are helpers.

    If you still require help please post a fresh Hijack This log to this thread.
    I will be notified and I will get back to you ASAP.
  • OrestOrest
    edited January 2008
    Katana wrote:
    Hello and welcome to the forums

    My name is Katana and I will be helping you to remove any infection(s) that you may have.

    Please observe these rules while we work:
    1. If you don't know, stop and ask! Don't keep going on.
    2. Please reply to this thread. Do not start a new topic.
    3. Please continue to respond until I give you the "All Clear"
    (Just because you can't see a problem doesn't mean it isn't there)

    If you can do those three things, everything should go smoothly :D

    I apologize for the delay in responding, but as you can probably see the forums are quite busy
    and sometimes a post manages to slip by us.
    Unfortunately there are far more people needing help than there are helpers.

    If you still require help please post a fresh Hijack This log to this thread.
    I will be notified and I will get back to you ASAP.

    Thx for your reply. I respect your rules here and appriciate your helping - been using these forums since couple of year now i guess.
    My pc is still restarting sometimes, not often, but still. And my internet-speed is slightly reduced. i have 20 mbt., but feels like 2. My pc is not very old.
    Ill keep running some virusscan and see if anything is going to happen.

    Ty - Orest
  • KatanaKatana
    edited January 2008
    Your log is not showing any malware,

    You appear to have
    Kaspersky Anti-Virus 7.0
    ZoneLabs
    AVG7
    installed, which is your AV and which is your Firewall ?
  • OrestOrest
    edited January 2008
    Hey there.

    My AV is AVG-antivirus 7.5 and my firewall is called zonealarm.

    My internetspeed is running slowly. Have a 20 mbt connection, but feels like less than 1 mbt. Dunno if i have to re-install all :rolleyes:

    Greetings - Orest
  • KatanaKatana
    edited January 2008
    Note about poker games:

    You appear to be a fan of games. but I think it's important to note that often these kind of programs are installed with other unwanted software, namely spyware or adware. If you did not install these programs yourself, or you do not use them any more, I would definitely recommend that you uninstall them from your computer, even if it is simply a precautionary measure. The amount of different poker software which arises on the internet means it is impossible to keep track of which ones are infected and which ones are not. If you do use the software, and wish to continue doing so, please ignore this. If you do decide to go ahead and remove the poker software, you should be able uninstall them via add/remove which can be found in the control panel. Let me know if you have any problems whilst doing so.
    Here are links to some poker sites regarded as safe for your reference.

    Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.
    1. Close all applications and windows.
    2. Double-click on dss.exe to run it, and follow the prompts.
    3. When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt<-this one will be minimized
    4. Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt and the extra.txt to your post. in your reply
  • OrestOrest
    edited January 2008
    Hey.

    I only have one pokersite on my desktop. I still have some money there, maybe i should transfer them and uninstall the poker client then. After i close my kaspersky in the background it seems my internetspeed is increased again. Dunno, if it is blocking something by vista.
    Here are my reports. Thx for replying - Orest

    Main.txt.

    Deckard's System Scanner v20071014.68
    Run by Ejer on 2008-01-09 20:45:55
    Computer is in Normal Mode.

    -- Last 5 Restore Point(s) --
    28: 2008-01-09 17:28:19 UTC - RP309 - Windows Update
    27: 2008-01-09 15:54:03 UTC - RP308 - Windows Update
    26: 2008-01-09 15:04:12 UTC - RP307 - Windows Update
    25: 2008-01-09 14:19:55 UTC - RP306 - Windows Update
    24: 2008-01-09 13:35:19 UTC - RP305 - Windows Update


    -- First Restore Point --
    1: 2007-12-10 13:46:03 UTC - RP277 - Removed Ventrilo


    Backed up registry hives.
    Performed disk cleanup.



    -- HijackThis (run as Ejer.exe)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 20:48:57, on 09-01-2008
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16575)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Grisoft\AVG7\avgcc.exe
    C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\TEXTware\HotKey\Twalink.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Users\Ejer\Desktop\dss.exe
    C:\Windows\system32\conime.exe
    C:\PROGRA~1\TRENDM~1\HIJACK~1\Ejer.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.dk/0SEDADK/SAOS01?FORM=TOOLBR
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.dk/0SEDADK/SAOS01?FORM=TOOLBR
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.dk/0SEDADK/SAOS01?FORM=TOOLBR
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [CTRegRun] C:\Windows\CTRegRun.EXE
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

    extra.txt.

    Deckard's System Scanner v20071014.68
    Extra logfile - please post this as an attachment with your post.

    -- System Information

    Microsoft® Windows Vista™ Home Basic (build 6000)
    Architecture: X86; Language: Other (0406) - see http://preview.*******.com/mhhp6

    CPU 0: AMD Athlon(tm) 64 X2 Dual Core Processor 3800+
    Percentage of Memory in Use: 36%
    Physical Memory (total/avail): 2045.88 MiB / 1300.13 MiB
    Pagefile Memory (total/avail): 4311.81 MiB / 3350.09 MiB
    Virtual Memory (total/avail): 2047.88 MiB / 1931.57 MiB

    C: is Fixed (NTFS) - 298.09 GiB total, 228.92 GiB free.
    D: is CDROM (No Media)

    \\.\PHYSICALDRIVE0 - MAXTOR STM3320820AS ATA Device - 298.09 GiB - 1 partition
    \PARTITION0 (bootable) - Installable File System - 298.09 GiB - C:



    -- Security Center

    AUOptions is scheduled to auto-install.
    Windows Internal Firewall is enabled.

    FW: ZoneAlarm Firewall v7.1.078.000 (Check Point, LTD.)
    AV: AVG 7.5.516 v7.5.516 (Grisoft)
    AV: Kaspersky Anti-Virus v7.0.0.125 (Kaspersky Lab) Disabled
    AS: Windows Defender v1.1.1505.0 (Microsoft Corporation)
    AS: Kaspersky Anti-Virus v7.0.0.125 (Kaspersky Lab) Disabled

    [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

    [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


    -- Environment Variables

    ALLUSERSPROFILE=C:\ProgramData
    APPDATA=C:\Users\Ejer\AppData\Roaming
    CommonProgramFiles=C:\Program Files\Common Files
    COMPUTERNAME=EJER-PC
    ComSpec=C:\Windows\system32\cmd.exe
    FP_NO_HOST_CHECK=NO
    HOMEDRIVE=C:
    HOMEPATH=\Users\Ejer
    LOCALAPPDATA=C:\Users\Ejer\AppData\Local
    LOGONSERVER=\\EJER-PC
    NUMBER_OF_PROCESSORS=2
    OS=Windows_NT
    Path=C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem
    PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
    PROCESSOR_ARCHITECTURE=x86
    PROCESSOR_IDENTIFIER=x86 Family 15 Model 75 Stepping 2, AuthenticAMD
    PROCESSOR_LEVEL=15
    PROCESSOR_REVISION=4b02
    ProgramData=C:\ProgramData
    ProgramFiles=C:\Program Files
    PROMPT=$P$G
    PUBLIC=C:\Users\Public
    SystemDrive=C:
    SystemRoot=C:\Windows
    TEMP=C:\Users\Ejer\AppData\Local\Temp
    TMP=C:\Users\Ejer\AppData\Local\Temp
    tvdumpflags=8
    USERDOMAIN=Ejer-PC
    USERNAME=Ejer
    USERPROFILE=C:\Users\Ejer
    windir=C:\Windows


    -- User Profiles

    Ejer


    -- Add/Remove Programs

    --> C:\Windows\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
    Ad-Aware SE Personal --> MsiExec.exe /X{78CC3BAB-DE2A-4FB4-8FBB-E4DADDC26747}
    Adobe Flash Player ActiveX --> C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Flash Player Plugin --> C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
    Adobe Reader 8.1.1 - Dansk --> MsiExec.exe /I{AC76BA86-7AD7-1030-7B44-A81000000003}
    µTorrent --> "C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL
    AVG 7.5 --> C:\Program Files\Grisoft\AVG7\setup.exe /UNINSTALL
    Compatibility Pack for the 2007 Office system --> MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE}
    DivX Content Uploader --> C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER
    DivX Web Player --> C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
    HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
    HotKey --> C:\Windows\IsUn0406.exe -f"C:\Program Files\TEXTware\HotKey\Uninst.isu"
    Java(TM) 6 Update 2 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
    Java(TM) 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
    Java(TM) SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
    Kaspersky Anti-Virus 7.0 --> MsiExec.exe /I{4B9BB601-13E9-4042-A3BC-E7955BF4A98F}
    Kaspersky Anti-Virus 7.0 --> MsiExec.exe /I{4B9BB601-13E9-4042-A3BC-E7955BF4A98F}
    Microsoft Office PowerPoint Fremviser 2003 --> MsiExec.exe /X{90AF0406-6000-11D3-8CFE-0150048383C9}
    Microsoft Office Professional Edition 2003 --> MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9}
    Mozilla Firefox (2.0.0.11) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    PartyPoker --> "C:\Programs\PartyGaming\PartyPoker\Uninstall.exe" "C:\Programs\PartyGaming\PartyPoker\install.log"
    Politikens Nudansk Ordbog --> MsiExec.exe /I{1B8E583F-7B1C-4EAF-AE72-798DBCFCD94E}
    Realtek AC'97 Audio --> Alcrmv.exe -r -m
    Skype™ 3.2 --> MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
    Sonic RecordNow! Deluxe --> MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
    Sonic Update Manager --> MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
    SpywareBlaster v3.5.1 --> "C:\Program Files\SpywareBlaster\unins000.exe"
    Switch --> C:\Program Files\NCH Swift Sound\Switch\uninst.exe
    TeamSpeak 2 RC2 --> "C:\Program Files\Teamspeak2_RC2\unins000.exe"
    Ventrilo Client --> MsiExec.exe /I{789289CA-F73A-4A16-A331-54D498CE069F}
    Windows Live Messenger --> MsiExec.exe /I{F53548BC-B8A8-43E4-85FC-A263640C347F}
    Windows Live Sign-in Assistant --> MsiExec.exe /I{49672EC2-171B-47B4-8CE7-50D7806360D7}
    Windows Media Player Firefox Plugin --> MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
    WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe
    World of Warcraft --> C:\Program Files\Common Files\Blizzard Entertainment\World of Warcraft\Uninstall.exe
    Xvid 1.1.3 final uninstall --> "C:\Program Files\Xvid\unins000.exe"
    ZoneAlarm --> C:\Program Files\Zone Labs\ZoneAlarm\zauninst.exe


    -- Application Event Log

    Event Record #/Type32201 / Error
    Event Submitted/Written: 01/09/2008 06:30:09 PM
    Event ID/Source: 1024 / MsiInstaller
    Event Description:
    Produkt: Compatibility Pack for the 2007 Office system - Opdateringen 'Microsoft Office Compatibility Pack Service Pack 1 (SP1)' kunne ikke installeres. Fejlkode 1603. Windows Installer kan oprette logfiler som hjælp til fejlfinding af problemer ved installation af softwarepakker. Brug følgende link for at få oplysninger om, hvordan logføring slås til: http://go.microsoft.com/fwlink/?LinkId=23127

    Event Record #/Type32200 / Error
    Event Submitted/Written: 01/09/2008 06:29:43 PM
    Event ID/Source: 11935 / MsiInstaller
    Event Description:
    Product: Compatibility Pack for the 2007 Office system -- Error 1935. An error occurred during the installation of assembly 'Microsoft.VC80.CRT,version="8.0.50727.762",type="win32",processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b"'. Please refer to Help and Support for more information. HRESULT: 0x8007054F. assembly interface: IAssemblyCacheItem, function: Commit, component: {98CB24AD-52FB-DB5F-A01F-C8B3B9A1E18E}

    Event Record #/Type32187 / Error
    Event Submitted/Written: 01/09/2008 04:55:41 PM
    Event ID/Source: 1024 / MsiInstaller
    Event Description:
    Produkt: Compatibility Pack for the 2007 Office system - Opdateringen 'Microsoft Office Compatibility Pack Service Pack 1 (SP1)' kunne ikke installeres. Fejlkode 1603. Windows Installer kan oprette logfiler som hjælp til fejlfinding af problemer ved installation af softwarepakker. Brug følgende link for at få oplysninger om, hvordan logføring slås til: http://go.microsoft.com/fwlink/?LinkId=23127

    Event Record #/Type32186 / Error
    Event Submitted/Written: 01/09/2008 04:55:19 PM
    Event ID/Source: 11935 / MsiInstaller
    Event Description:
    Product: Compatibility Pack for the 2007 Office system -- Error 1935. An error occurred during the installation of assembly 'Microsoft.VC80.CRT,version="8.0.50727.762",type="win32",processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b"'. Please refer to Help and Support for more information. HRESULT: 0x8007054F. assembly interface: IAssemblyCacheItem, function: Commit, component: {98CB24AD-52FB-DB5F-A01F-C8B3B9A1E18E}

    Event Record #/Type32176 / Error
    Event Submitted/Written: 01/09/2008 04:06:00 PM
    Event ID/Source: 1024 / MsiInstaller
    Event Description:
    Produkt: Compatibility Pack for the 2007 Office system - Opdateringen 'Microsoft Office Compatibility Pack Service Pack 1 (SP1)' kunne ikke installeres. Fejlkode 1603. Windows Installer kan oprette logfiler som hjælp til fejlfinding af problemer ved installation af softwarepakker. Brug følgende link for at få oplysninger om, hvordan logføring slås til: http://go.microsoft.com/fwlink/?LinkId=23127



    -- Security Event Log

    No Errors/Warnings found.


    -- System Event Log

    Event Record #/Type55613 / Warning
    Event Submitted/Written: 01/09/2008 08:52:13 PM
    Event ID/Source: 57 / volsnap
    Event Description:
    Systemet kunne ikke tømme data til transaktionslogfilen. Beskadigede data kan forekomme.

    Event Record #/Type55612 / Warning
    Event Submitted/Written: 01/09/2008 08:52:08 PM
    Event ID/Source: 57 / volsnap
    Event Description:
    Systemet kunne ikke tømme data til transaktionslogfilen. Beskadigede data kan forekomme.

    Event Record #/Type55611 / Warning
    Event Submitted/Written: 01/09/2008 08:52:03 PM
    Event ID/Source: 57 / volsnap
    Event Description:
    Systemet kunne ikke tømme data til transaktionslogfilen. Beskadigede data kan forekomme.

    Event Record #/Type55610 / Warning
    Event Submitted/Written: 01/09/2008 08:51:58 PM
    Event ID/Source: 57 / volsnap
    Event Description:
    Systemet kunne ikke tømme data til transaktionslogfilen. Beskadigede data kan forekomme.

    Event Record #/Type55609 / Warning
    Event Submitted/Written: 01/09/2008 08:51:53 PM
    Event ID/Source: 57 / volsnap
    Event Description:
    Systemet kunne ikke tømme data til transaktionslogfilen. Beskadigede data kan forekomme.



    -- End of Deckard's System Scanner: finished at 2008-01-09 20:52:15
  • KatanaKatana
    edited January 2008
    Orest wrote:
    After i close my kaspersky in the background it seems my internetspeed is increased again. Dunno, if it is blocking something by vista.
    Here are my reports. Thx for replying - Orest

    I'm not sure I understand ?

    When I asked what your AV and Firewall were you said AVG and Zonealarm.
    You should only have one AV running, and one Firewall.
This discussion has been closed.